Sebastien Rousseau

POLICY

DORA

Digital Operational Resilience Act — register of information, ICT third-party risk, threat-led penetration testing, and the operational resilience programme banks must run.

40 articles

INFRASTRUCTURE & CRYPTOGRAPHY

KyberLib and the Post-Quantum Banking Migration in 2026: From Standards to Code

KyberLib turns the post-quantum banking migration from policy paper into inspectable Rust — FIPS 203 ML-KEM key encapsulation, hybrid classical-plus-quantum handshakes, no_std compilation for HSMs, crypto-agile abstraction boundaries, and the DORA Article 5 governance evidence boards now need.

APPLIED AI

CloudCDN: An Open-Source Blueprint for the AI-Native Edge in 2026

CloudCDN is an open-source blueprint for the AI-native edge — a zero-trust MCP gateway with 42 tools, atomic Durable Objects rate limiting, WebAuthn passkeys, signed URLs, SLSA Level 3 provenance, and 3,185 tests at 100% coverage, mapped to DORA, BCBS 239, and Basel III.

APPLIED AI

The Wholesale Payments Index in 2026: ISO 20022, Tokenised Deposits, Real-Time Rails, and Cross-Border Settlement

An index framework for measuring wholesale-payments readiness in 2026: ISO 20022 structured-address compliance ahead of SWIFT's November 2026 milestone, tokenised-deposit settlement, BIS Project Agorá cross-border atomicity, real-time rail orchestration, and liquidity efficiency. Four percentages — structured-data completeness, rail-routing optimality, settlement-finality lag, and Agorá-corridor coverage — turn payment-operations posture into supervisory-ready evidence.

APPLIED AI

The Cloud Native Banking Index in 2026: DORA, Platform Engineering, Sovereign Cloud, and Operational Resilience

An engineering blueprint for cloud-native banking in DORA audit phase. Five platform-engineering primitives — Kubernetes paved roads, Backstage portal, GitOps via ArgoCD, Open Policy Agent admission, OpenTelemetry end-to-end — produce Article 8 register evidence at the speed of the pipeline. Tested exit-execution annually for CTPP-dependent CIFs against BIA-derived RTO targets. Sovereign-cloud options (AWS European Sovereign Cloud, Microsoft EU Data Boundary, Bleu, Thales / S3NS) addressed as engineering decisions, not branding.

APPLIED AI

The Quantum-Safe Banking Index in 2026: Post-Quantum Cryptography, QKD, Crypto-Agility, and Harvest-Now-Decrypt-Later Risk

An index framework for measuring quantum-safe banking readiness in 2026: cryptographic bill of materials, hybrid TLS deployment, NIST FIPS 203 / 204 / 205 migration progress, crypto-agility primitives, and harvest-now-decrypt-later exposure across long-lived confidential data. The Board-Level Quantum Scorecard defines four exact percentages — inventory completeness, HNDL exposure, NIST migration progress, crypto-agility readiness — that turn project statuses into supervisory-ready evidence.

APPLIED AI

The Agentic AI Index for Banks in 2026: Measuring Autonomy, Governance, Auditability, and Business Impact

An engineering blueprint for agentic AI in tier-1 banks: classify by permissions not intelligence, treat every production agent as an SR 11-7 / SS1/23 model from day one, and build the five-component control plane — OAuth-scoped service accounts, deterministic semantic routing, OPA policy gates, immutable WORM audit logs, and a tested kill switch — that turns autonomous workflows into auditable evidence.

APPLIED AI

Post-Quantum Payments Infrastructure: Why Banks May Replace Rather Than Retrofit Legacy Rails

Harvest-now-decrypt-later turns today's TLS-protected payment messages into tomorrow's decrypted exposure. ML-KEM and ML-DSA are an order of magnitude larger than the RSA and ECC keys legacy rails were sized for — retrofit triggers fragmentation, latency, and HSM exhaustion. The 2026 architectural decision is whether to patch or replace before the regulatory clock runs out.

APPLIED AI

Wholesale Digital Markets in the UK: Tokenised Gilts, Settlement, and the New Champion Role

The UK Wholesale Digital Markets Champion role makes tokenised gilts, DLT-based settlement, and digital wholesale finance a national competitiveness project. The 2026 strategic question for banks is design discipline — which tokenised assets sit on which platform, how settlement risk is evidenced, and how to defend the City's wholesale role against Singapore, Switzerland, and Frankfurt.

APPLIED AI

Digital Assets in 2026: The Infrastructure Transition Banks Cannot Delay

Digital assets are no longer an innovation bet. They are a settlement, custody, and balance-sheet architecture question. Crypto is a ~$3 trillion asset class, stablecoins have reached ~$300 billion, and tokenised real-world assets grew ~300% in 2025. The strategic task for banks in 2026 is not whether to engage but how to design infrastructure, controls, and governance for a world where money, assets, and settlement become programmable.

APPLIED AI

DORA, the EU AI Act, and Data Sovereignty: The 2026 Compliance Stack for Banks

DORA, the EU AI Act, GDPR, cloud concentration risk, and data sovereignty converge into one 2026 compliance stack for banks. The strategic question is design discipline — running compliance, AI governance, ICT-resilience evidence, and sovereign-data choices as one architecture, not five parallel programmes.

APPLIED AI

Stablecoins vs Tokenised Deposits in 2026: What Banks Actually Need to Defend

Stablecoins and tokenised deposits converge around programmable settlement but diverge on balance-sheet, legal, liquidity, and trust models. The 2026 strategic question for banks is design discipline — which money model carries which client workflow — and how to defend deposit franchise, settlement role, and regulated brand against private-issuer competition.

APPLIED AI

Programmable Liquidity in 2026: AI, Tokenised Deposits, and Real-Time Treasury Orchestration

Programmable liquidity in 2026 connects AI forecasting, tokenised deposits, real-time rails, virtual accounts, stablecoins, and TMS into one orchestration layer for working capital. The strategic question for banks is design discipline: which data, rails, controls, liabilities, and client workflows belong together — and how to evidence the orchestration to clients and supervisors.

APPLIED AI

Agentic Payments in Banking: Consent, Liability, and the New Payment UX in 2026

Agentic payments crossed from concept to live transaction in 2026 — Mastercard and Rabobank executed a Netherlands AI-agent payment via Agent Pay, AP2-style cryptographic mandates are emerging, and HM Treasury says payment-services regulation must adapt. The banking architecture question is consent, identity, liability, and pre-settlement evidence.

APPLIED AI

Quantum-Safe Payments: Why the Industry Must Act Now

Modern payment infrastructure relies on public-key cryptography. RSA, ECC, and Diffie-Hellman. To authenticate transactions, protect cardholder data, and secure messaging between financial…

APPLIED AI

Unlocking Gemini 1.5: Google's AI Revolution Explained

Gemini 1.5 is built on a new version of the Mixture of Experts (MoE) architecture, enhancing its ability to selectively activate the most relevant pathways in its neural network. This advancement…

APPLIED AI

Àkàndé: GPT-Powered Voice Assistant for Executives

Àkàndé is an open-source Python voice assistant that chains OpenAI Whisper speech recognition, GPT-4 chat completions, and a local SQLite response cache into a voice-driven workflow — generating PDF summaries from conversation history via fpdf2 and keeping all stored data local with no cloud persistence.

APPLIED AI

Audio Analyser: Azure Speech, NLP, and Translation Pipeline

Audio Analyser is an open-source Python tool that chains Azure Cognitive Services speech-to-text, Text Analytics NLP, and Translator into a single CherryPy web application — turning audio recordings into structured transcripts, sentiment scores, and multilingual translations without cloud lock-in beyond the Azure SDK.

APPLIED AI

Generative AI in 2023: How It Works, Where It Lands

Generative AI crossed from research curiosity to production deployment in 2023. GPT-4, Claude 2, Llama 2, and Mistral demonstrated that large language models could handle legal document review, code generation, and customer dialogue at human-comparable quality — raising immediate governance questions about hallucination, data leakage, and regulatory compliance in financial services.

APPLIED AI

Static Site Generator: Fastest Rust-Based SSG

In the ever-evolving digital landscape, speed and quality are of paramount importance. I was determined to find a way to quickly generate static websites that showcase high quality, accessibility,…